Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/1leVhOwQhgtuvqAzGyf1Rg8aBPs.roa
File: 1leVhOwQhgtuvqAzGyf1Rg8aBPs.roa (raw, json)
Hash identifier: 5lfqO3mFPlCWvakbGn84bcT0eAj3nzrR14ovZ6+U720=
Subject key identifier: D6:57:95:84:EC:10:86:0B:6E:BE:A0:33:1B:27:F5:46:0F:1A:04:FB
Certificate issuer: /CN=472617c340b77750d13b8787930e477dab5aa584
Certificate serial: 01A1638CB07A76331C67306A45B8FB330873
Authority key identifier: 47:26:17:C3:40:B7:77:50:D1:3B:87:87:93:0E:47:7D:AB:5A:A5:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyYXw0C3d1DRO4eHkw5HfatapYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/1leVhOwQhgtuvqAzGyf1Rg8aBPs.roa
Signing time: Thu 22 Oct 2026 12:18:46 +0000
ROA not before: Thu 22 Oct 2026 12:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213367
IP address blocks: 2001:678:13a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/RyYXw0C3d1DRO4eHkw5HfatapYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/RyYXw0C3d1DRO4eHkw5HfatapYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyYXw0C3d1DRO4eHkw5HfatapYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:8c:b0:7a:76:33:1c:67:30:6a:45:b8:fb:33:08:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472617c340b77750d13b8787930e477dab5aa584
Validity
Not Before: Oct 22 12:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6579584ec10860b6ebea0331b27f5460f1a04fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:d0:c8:2a:60:49:a0:aa:5a:97:38:0f:64:
78:0e:42:24:9b:f8:42:bf:17:f9:99:7a:7e:8f:6d:
e4:09:23:7a:ef:7b:cc:d2:f7:9d:02:e5:a1:77:da:
be:4a:2c:b6:f4:4e:ec:7f:3a:06:44:e6:5f:91:e6:
02:aa:67:15:bc:94:c5:fd:b4:e6:29:71:07:ad:a9:
c6:09:12:5d:0f:2e:c4:4d:a1:b1:29:65:e1:7e:61:
d5:62:49:bb:ca:e2:e2:9f:20:f7:f0:85:d8:b1:e5:
0f:04:7a:ba:9a:b8:a3:f7:df:35:48:cc:4b:a0:a9:
e3:33:d6:7a:4e:79:82:12:57:7e:83:e7:2e:42:c0:
f9:59:03:06:b3:8a:bc:4c:5f:2b:6a:23:49:cb:7c:
25:7a:c0:08:78:d7:ec:f1:d3:a7:f6:9e:1e:d6:64:
bb:0f:f5:aa:75:5a:3c:31:1a:51:b6:6d:23:0f:6f:
7d:15:49:16:5c:81:5c:cd:83:c2:cb:2b:57:06:63:
09:ea:b3:f4:4b:91:fc:94:2f:cc:82:50:0a:ff:cf:
9f:58:5e:46:b0:de:a2:53:b8:76:56:aa:e7:cb:b8:
90:d1:dd:ed:84:3a:5d:b1:fb:2d:23:d0:78:2a:d3:
53:db:fb:3b:eb:4e:9d:4b:58:c9:bd:27:32:8a:c8:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:95:84:EC:10:86:0B:6E:BE:A0:33:1B:27:F5:46:0F:1A:04:FB
X509v3 Authority Key Identifier:
keyid:47:26:17:C3:40:B7:77:50:D1:3B:87:87:93:0E:47:7D:AB:5A:A5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyYXw0C3d1DRO4eHkw5HfatapYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/1leVhOwQhgtuvqAzGyf1Rg8aBPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f5a793-57a0-48b9-b589-0bae2726b2ce/1/RyYXw0C3d1DRO4eHkw5HfatapYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:13a0::/48
Signature Algorithm: sha256WithRSAEncryption
10:94:58:7a:67:7d:c2:90:71:b5:fe:c0:f6:47:42:7d:05:9d:
87:73:b6:77:2b:b1:50:8b:dd:99:e8:3e:34:c2:29:9d:93:b6:
c0:b7:2d:47:24:dc:1c:b6:ca:5e:33:24:94:e4:51:4d:7c:63:
7c:62:2f:52:cc:c0:b6:ed:7c:e3:ba:12:a7:0f:33:35:4a:53:
38:6f:c9:ba:76:d9:e7:dd:21:e7:be:a5:cc:1b:e7:e2:ed:e7:
62:dd:9b:4a:2a:1f:3b:47:17:2d:4d:b7:86:25:76:98:89:2c:
4a:8c:2e:bf:ce:6c:09:e0:e3:37:a3:cb:07:9c:23:88:42:12:
ba:ef:65:b6:f2:6a:ba:82:7a:4e:04:c3:9b:58:e2:0b:2d:2d:
07:0c:f7:5c:df:79:11:85:36:da:64:d4:b1:f3:95:68:cc:6f:
59:f8:e7:3a:c7:e1:9b:54:3c:e7:59:14:6b:bd:1e:ec:32:d0:
3b:35:4c:51:31:e9:bc:03:a9:a1:d2:96:ad:79:fa:22:e9:c2:
f0:fb:10:a9:23:f4:7e:f0:e1:e6:a2:99:9d:de:56:22:8f:e3:
ec:fe:21:19:ef:24:c1:71:a8:9d:8d:cf:cd:e3:05:fb:84:90:
de:7e:c9:e5:1c:e7:e2:0b:94:58:9f:15:f1:b6:e2:1e:cb:c9:
ce:a6:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:55:32 2026 by rpki-client